Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2011-4124

created 2 months ago

Input validation issues were found in Calibre at devices/linux_mount_helper.c which …

Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges.

References

https://git.zx2c4.com/calibre-mount-helper-exploit/about/ x_transferredx_refsource_MISC
https://www.openwall.com/lists/oss-security/2011/11/02/2 x_transferredx_refsource_MISC
https://bugs.launchpad.net/calibre/+bug/885027 x_transferredx_refsource_MISC
https://lwn.net/Articles/464824/ x_transferredx_refsource_MISC

Affected products

Calibre

==unknown

Matching in nixpkgs

pkgs.calibre

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2
nixos-25.11 8.14.0
- nixos-25.11-small 8.14.0
- nixpkgs-25.11-darwin 8.14.0

pkgs.calibre-web

Web app for browsing, reading and downloading eBooks stored in a Calibre database

nixos-unstable 0.6.25
- nixpkgs-unstable 0.6.25
- nixos-unstable-small 0.6.25
nixos-25.11 0.6.25
- nixos-25.11-small 0.6.25
- nixpkgs-25.11-darwin 0.6.25

pkgs.pkgsRocm.calibre

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2
nixos-25.11 8.14.0
- nixos-25.11-small 8.14.0
- nixpkgs-25.11-darwin 8.14.0

pkgs.calibre-no-speech

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

pkgs.pkgsRocm.calibre-no-speech

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

Package maintainers

@pSub Pascal Wittmann <mail@pascal-wittmann.de>
@pborzenkov Pavel Borzenkov <pavel@borzenkov.net>